General
- Target 2026-07-03_94ced0105bd4a9aaee558842db9a54b1_icedid_njrat_ryuk
- Size 936KB
- Sample260703-rb89fafw4l
- SHA256 e175f937e64ab55334d6d01ce310019ebe1ad76da4f4e9a48270a8bcde477f12
- MD5 94ced0105bd4a9aaee558842db9a54b1
- SHA1 0be5c11361ac9c01a1bb69d73897ffaec48ac7c4
- SHA512 0a88fb600e60093df665be23cadfd3314b8d149e9f6e38555643de8d82310f59815c30e1c584f5aec4b496bca044d4f4533a97c4f4534cbc96a3d918f1f61861
- SSDEEP 24576:+Q7onabLDVBJdLBhvn/+h1xUgXe4i7ojhsP5Lgrk1TWb4AN5:b7onabPV3xBh34Le30jaNf1TWbdz
- TLSH T1D915014677E444F9E2778238C9E24B15E5B23C915B30CB1F03A527679F33691AE39B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_94ced0105bd4a9aaee558842db9a54b1_icedid_njrat_ryuk.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_94ced0105bd4a9aaee558842db9a54b1_icedid_njrat_ryuk
- Size 936KB
- SHA256 e175f937e64ab55334d6d01ce310019ebe1ad76da4f4e9a48270a8bcde477f12
- MD5 94ced0105bd4a9aaee558842db9a54b1
- SHA1 0be5c11361ac9c01a1bb69d73897ffaec48ac7c4
- SHA512 0a88fb600e60093df665be23cadfd3314b8d149e9f6e38555643de8d82310f59815c30e1c584f5aec4b496bca044d4f4533a97c4f4534cbc96a3d918f1f61861
- SSDEEP 24576:+Q7onabLDVBJdLBhvn/+h1xUgXe4i7ojhsP5Lgrk1TWb4AN5:b7onabPV3xBh34Le30jaNf1TWbdz
- TLSH T1D915014677E444F9E2778238C9E24B15E5B23C915B30CB1F03A527679F33691AE39B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1